Jailbreaking RabbitOS: Uncovering secret logs, and GPL violations

Re:Jailbreaking RabbitOS: Uncovering secret logs, and GPL vi... by Aurornis on Wednesday July 17, 2024 @01:57PM (#40988541)

It appears Rabbit had already released an update to address the issue on July 11th, the day before the author asked them for comment. They posted it here https://www.rabbit.tech/security-advisory-071124

> As of 11 July, we’ve made the following changes:

> Pairing data can no longer be used to read from rabbithole. It can only trigger actions.

> Pairing data is no longer logged to the device.

> We have reduced the amount of log data that gets stored on the device.

> The Factory Reset option is now available via the settings menu. Customers should use this option to erase ALL data from their r1 prior to transferring ownership.

[ Parent | on HN ]

Re:Jailbreaking RabbitOS: Uncovering secret logs, and GPL vi... by Lockal on Wednesday July 17, 2024 @04:22PM (#40989973)

How did you find this page? I tried to navigate all visible links from the main page and don't see any security advisory pages.

[ Parent | on HN ]

Re:Jailbreaking RabbitOS: Uncovering secret logs, and GPL vi... by Retr0id on Wednesday July 17, 2024 @04:46PM (#40990171)

I believe it was buried in their "community forums", which only recently became publicly viewable.

[ Parent | on HN ]

Re:Jailbreaking RabbitOS: Uncovering secret logs, and GPL vi... by Ylpertnodi on Thursday July 18, 2024 @06:33AM (#40994248)

"Only recently" will have a date.

[ Parent | on HN ]

Re:Jailbreaking RabbitOS: Uncovering secret logs, and GPL vi... by Retr0id on Thursday July 18, 2024 @07:59AM (#40994782)

Would you like to share that date with us?

[ Parent | on HN ]